LeakIX - Host api.xmas402.com

Domain api.xmas402.com

The Netherlands

MICROSOFT-CORP-MSN-AS-BLOCK

Software information

Microsoft-IIS 10.0

tcp/443

Swagger API description is publicly available

Exposing Swagger/OpenAPI documentation is primarily a risk if your API has underlying security flaws, as it gives attackers a precise roadmap to find them.

Those detail every endpoint, parameter, and data model, making it easier to discover and exploit vulnerabilities like broken access control or injection points.

While a perfectly secure API mitigates the danger, protecting your documentation is a critical layer of defense that forces attackers to work without a map.

IP: 65.52.128.33
Domain: api.xmas402.com
Port: 443
URL: https://api.xmas402.com

First seen 2025-12-08 20:57
Last seen 2026-01-09 07:56
Open for 31 days
- Severity: info
  Fingerprint: 5733ddf49ff49cd1aad035498baea4d28baea4d28baea4d28baea4d28baea4d2
```
Public Swagger UI/API detected at path: /swagger/index.html - sample paths:
GET /Gift/send-gift
```
  Found on 2026-01-09 07:56
- Severity: info
  Fingerprint: 5733ddf49ff49cd12ec8532c2ec8532c2ec8532c2ec8532c2ec8532c2ec8532c
```
Public Swagger UI/API detected at path: /swagger/index.html
```
  Found on 2025-12-08 20:57
Create report

Open service 65.52.128.33:443 · api.xmas402.com

2026-01-09 07:56

HTTP/1.1 200 OK
Content-Length: 2616
Connection: close
Content-Type: text/html
Date: Fri, 09 Jan 2026 07:57:13 GMT
Server: Microsoft-IIS/10.0
Accept-Ranges: bytes
ETag: "1dc69f700786b38"
Last-Modified: Wed, 10 Dec 2025 17:04:10 GMT
Set-Cookie: ARRAffinity=2fd1279d68de4a37e576a682eee389416b40273f4bd87e1eb404728b4b70263c;Path=/;HttpOnly;Secure;Domain=api.xmas402.com
Set-Cookie: ARRAffinitySameSite=2fd1279d68de4a37e576a682eee389416b40273f4bd87e1eb404728b4b70263c;Path=/;HttpOnly;SameSite=None;Secure;Domain=api.xmas402.com
Strict-Transport-Security: max-age=31536000
X-Powered-By: ASP.NET

Page title: xmas402 | Exchange gifts with Humans and AI Agents

<!DOCTYPE html>
<html lang="en">
<head>
    <base href="/" />
    <link rel="preload" id="webassembly" />
    <link rel="stylesheet" href="css/blazor-ui.css" />
    <link rel="stylesheet" href="css/xmas.css" />
    <link rel="stylesheet" href="xmas402.Client.styles.css" />
    <script type="importmap"></script>


    <title>xmas402 | Exchange gifts with Humans and AI Agents</title>

    <!-- --- SOCIAL PREVIEWS (Open Graph / Twitter) --- -->
    <meta name="description" content="Exchange gifts with Humans and AI Agents using USDC on Base. A retro 90s styled festive payment protocol.">

    <!-- Open Graph / Facebook / Discord -->
    <meta property="og:type" content="website">
    <meta property="og:url" content="https://xmas402.com/">
    <meta property="og:title" content="xmas402 | The Protocol of Giving">
    <meta property="og:description" content="Join the on-chain holiday queue. Send random USDC gifts to previous visitors to become the next recipient. Humans & AI Agents welcome.">
    <meta property="og:image" content="https://placehold.co/1200x630/000000/00ff00/png?text=xmas402">

    <!-- Twitter -->
    <meta property="twitter:card" content="summary_large_image">
    <meta property="twitter:url" content="https://xmas402.com/">
    <meta property="twitter:title" content="xmas402 | Base Winter Protocol">
    <meta property="twitter:description" content="A 90s-themed experiment on Base. Pay it forward with USDC to join the gifting queue.">
    <meta property="twitter:image" content="https://placehold.co/1200x630/000000/00ff00/png?text=xmas402">

</head>
<body>


    <div id="app">
        <svg class="loading-progress">
            <circle r="40%" cx="50%" cy="50%" />
            <circle r="40%" cx="50%" cy="50%" />
        </svg>
        <div class="loading-progress-text"></div>
    </div>

    <div id="blazor-error-ui">
        An unhandled error has occurred.
        <a href="" class="reload">Reload</a>
        <a class="dismiss">🗙</a>
    </div>
    <!--<script src="/_content/Nethereum.Metamask.Blazor/NethereumMetamask.js"></script>-->
    <script defer src="https://api.xmas402.com/_content/Nethereum.Metamask.Blazor/NethereumMetamask.js"></script>
    <script src="_framework/blazor.webassembly#[.{fingerprint}].js" autostart="false"></script>

    <script>
        function startBlazor() {
            if (typeof NethereumMetamaskInterop !== 'undefined' && typeof Blazor !== 'undefined') {
                Blazor.start();
            } else {
                setTimeout(startBlazor, 50);
            }
        }
        startBlazor();
    </script>
</body>

</html>

Found 2026-01-09 by HttpPlugin

Create report

Open service 65.52.128.33:443 · api.xmas402.com

2026-01-02 05:35

HTTP/1.1 200 OK
Content-Length: 2616
Connection: close
Content-Type: text/html
Date: Fri, 02 Jan 2026 05:35:10 GMT
Server: Microsoft-IIS/10.0
Accept-Ranges: bytes
ETag: "1dc69f700786b38"
Last-Modified: Wed, 10 Dec 2025 17:04:10 GMT
Set-Cookie: ARRAffinity=2fd1279d68de4a37e576a682eee389416b40273f4bd87e1eb404728b4b70263c;Path=/;HttpOnly;Secure;Domain=api.xmas402.com
Set-Cookie: ARRAffinitySameSite=2fd1279d68de4a37e576a682eee389416b40273f4bd87e1eb404728b4b70263c;Path=/;HttpOnly;SameSite=None;Secure;Domain=api.xmas402.com
Strict-Transport-Security: max-age=31536000
X-Powered-By: ASP.NET

Page title: xmas402 | Exchange gifts with Humans and AI Agents

<!DOCTYPE html>
<html lang="en">
<head>
    <base href="/" />
    <link rel="preload" id="webassembly" />
    <link rel="stylesheet" href="css/blazor-ui.css" />
    <link rel="stylesheet" href="css/xmas.css" />
    <link rel="stylesheet" href="xmas402.Client.styles.css" />
    <script type="importmap"></script>


    <title>xmas402 | Exchange gifts with Humans and AI Agents</title>

    <!-- --- SOCIAL PREVIEWS (Open Graph / Twitter) --- -->
    <meta name="description" content="Exchange gifts with Humans and AI Agents using USDC on Base. A retro 90s styled festive payment protocol.">

    <!-- Open Graph / Facebook / Discord -->
    <meta property="og:type" content="website">
    <meta property="og:url" content="https://xmas402.com/">
    <meta property="og:title" content="xmas402 | The Protocol of Giving">
    <meta property="og:description" content="Join the on-chain holiday queue. Send random USDC gifts to previous visitors to become the next recipient. Humans & AI Agents welcome.">
    <meta property="og:image" content="https://placehold.co/1200x630/000000/00ff00/png?text=xmas402">

    <!-- Twitter -->
    <meta property="twitter:card" content="summary_large_image">
    <meta property="twitter:url" content="https://xmas402.com/">
    <meta property="twitter:title" content="xmas402 | Base Winter Protocol">
    <meta property="twitter:description" content="A 90s-themed experiment on Base. Pay it forward with USDC to join the gifting queue.">
    <meta property="twitter:image" content="https://placehold.co/1200x630/000000/00ff00/png?text=xmas402">

</head>
<body>


    <div id="app">
        <svg class="loading-progress">
            <circle r="40%" cx="50%" cy="50%" />
            <circle r="40%" cx="50%" cy="50%" />
        </svg>
        <div class="loading-progress-text"></div>
    </div>

    <div id="blazor-error-ui">
        An unhandled error has occurred.
        <a href="" class="reload">Reload</a>
        <a class="dismiss">🗙</a>
    </div>
    <!--<script src="/_content/Nethereum.Metamask.Blazor/NethereumMetamask.js"></script>-->
    <script defer src="https://api.xmas402.com/_content/Nethereum.Metamask.Blazor/NethereumMetamask.js"></script>
    <script src="_framework/blazor.webassembly#[.{fingerprint}].js" autostart="false"></script>

    <script>
        function startBlazor() {
            if (typeof NethereumMetamaskInterop !== 'undefined' && typeof Blazor !== 'undefined') {
                Blazor.start();
            } else {
                setTimeout(startBlazor, 50);
            }
        }
        startBlazor();
    </script>
</body>

</html>

Found 2026-01-02 by HttpPlugin

Create report

Open service 65.52.128.33:443 · api.xmas402.com

2025-12-26 07:26

HTTP/1.1 200 OK
Content-Length: 2616
Connection: close
Content-Type: text/html
Date: Fri, 26 Dec 2025 07:26:43 GMT
Server: Microsoft-IIS/10.0
Accept-Ranges: bytes
ETag: "1dc69f700786b38"
Last-Modified: Wed, 10 Dec 2025 17:04:10 GMT
Set-Cookie: ARRAffinity=2fd1279d68de4a37e576a682eee389416b40273f4bd87e1eb404728b4b70263c;Path=/;HttpOnly;Secure;Domain=api.xmas402.com
Set-Cookie: ARRAffinitySameSite=2fd1279d68de4a37e576a682eee389416b40273f4bd87e1eb404728b4b70263c;Path=/;HttpOnly;SameSite=None;Secure;Domain=api.xmas402.com
Strict-Transport-Security: max-age=31536000
X-Powered-By: ASP.NET

Page title: xmas402 | Exchange gifts with Humans and AI Agents

<!DOCTYPE html>
<html lang="en">
<head>
    <base href="/" />
    <link rel="preload" id="webassembly" />
    <link rel="stylesheet" href="css/blazor-ui.css" />
    <link rel="stylesheet" href="css/xmas.css" />
    <link rel="stylesheet" href="xmas402.Client.styles.css" />
    <script type="importmap"></script>


    <title>xmas402 | Exchange gifts with Humans and AI Agents</title>

    <!-- --- SOCIAL PREVIEWS (Open Graph / Twitter) --- -->
    <meta name="description" content="Exchange gifts with Humans and AI Agents using USDC on Base. A retro 90s styled festive payment protocol.">

    <!-- Open Graph / Facebook / Discord -->
    <meta property="og:type" content="website">
    <meta property="og:url" content="https://xmas402.com/">
    <meta property="og:title" content="xmas402 | The Protocol of Giving">
    <meta property="og:description" content="Join the on-chain holiday queue. Send random USDC gifts to previous visitors to become the next recipient. Humans & AI Agents welcome.">
    <meta property="og:image" content="https://placehold.co/1200x630/000000/00ff00/png?text=xmas402">

    <!-- Twitter -->
    <meta property="twitter:card" content="summary_large_image">
    <meta property="twitter:url" content="https://xmas402.com/">
    <meta property="twitter:title" content="xmas402 | Base Winter Protocol">
    <meta property="twitter:description" content="A 90s-themed experiment on Base. Pay it forward with USDC to join the gifting queue.">
    <meta property="twitter:image" content="https://placehold.co/1200x630/000000/00ff00/png?text=xmas402">

</head>
<body>


    <div id="app">
        <svg class="loading-progress">
            <circle r="40%" cx="50%" cy="50%" />
            <circle r="40%" cx="50%" cy="50%" />
        </svg>
        <div class="loading-progress-text"></div>
    </div>

    <div id="blazor-error-ui">
        An unhandled error has occurred.
        <a href="" class="reload">Reload</a>
        <a class="dismiss">🗙</a>
    </div>
    <!--<script src="/_content/Nethereum.Metamask.Blazor/NethereumMetamask.js"></script>-->
    <script defer src="https://api.xmas402.com/_content/Nethereum.Metamask.Blazor/NethereumMetamask.js"></script>
    <script src="_framework/blazor.webassembly#[.{fingerprint}].js" autostart="false"></script>

    <script>
        function startBlazor() {
            if (typeof NethereumMetamaskInterop !== 'undefined' && typeof Blazor !== 'undefined') {
                Blazor.start();
            } else {
                setTimeout(startBlazor, 50);
            }
        }
        startBlazor();
    </script>
</body>

</html>

Found 2025-12-26 by HttpPlugin

Create report

Open service 65.52.128.33:443 · api.xmas402.com

2025-12-22 09:12

HTTP/1.1 200 OK
Content-Length: 2616
Connection: close
Content-Type: text/html
Date: Mon, 22 Dec 2025 09:12:02 GMT
Server: Microsoft-IIS/10.0
Accept-Ranges: bytes
ETag: "1dc69f700786b38"
Last-Modified: Wed, 10 Dec 2025 17:04:10 GMT
Set-Cookie: ARRAffinity=2fd1279d68de4a37e576a682eee389416b40273f4bd87e1eb404728b4b70263c;Path=/;HttpOnly;Secure;Domain=api.xmas402.com
Set-Cookie: ARRAffinitySameSite=2fd1279d68de4a37e576a682eee389416b40273f4bd87e1eb404728b4b70263c;Path=/;HttpOnly;SameSite=None;Secure;Domain=api.xmas402.com
Strict-Transport-Security: max-age=31536000
X-Powered-By: ASP.NET

Page title: xmas402 | Exchange gifts with Humans and AI Agents

<!DOCTYPE html>
<html lang="en">
<head>
    <base href="/" />
    <link rel="preload" id="webassembly" />
    <link rel="stylesheet" href="css/blazor-ui.css" />
    <link rel="stylesheet" href="css/xmas.css" />
    <link rel="stylesheet" href="xmas402.Client.styles.css" />
    <script type="importmap"></script>


    <title>xmas402 | Exchange gifts with Humans and AI Agents</title>

    <!-- --- SOCIAL PREVIEWS (Open Graph / Twitter) --- -->
    <meta name="description" content="Exchange gifts with Humans and AI Agents using USDC on Base. A retro 90s styled festive payment protocol.">

    <!-- Open Graph / Facebook / Discord -->
    <meta property="og:type" content="website">
    <meta property="og:url" content="https://xmas402.com/">
    <meta property="og:title" content="xmas402 | The Protocol of Giving">
    <meta property="og:description" content="Join the on-chain holiday queue. Send random USDC gifts to previous visitors to become the next recipient. Humans & AI Agents welcome.">
    <meta property="og:image" content="https://placehold.co/1200x630/000000/00ff00/png?text=xmas402">

    <!-- Twitter -->
    <meta property="twitter:card" content="summary_large_image">
    <meta property="twitter:url" content="https://xmas402.com/">
    <meta property="twitter:title" content="xmas402 | Base Winter Protocol">
    <meta property="twitter:description" content="A 90s-themed experiment on Base. Pay it forward with USDC to join the gifting queue.">
    <meta property="twitter:image" content="https://placehold.co/1200x630/000000/00ff00/png?text=xmas402">

</head>
<body>


    <div id="app">
        <svg class="loading-progress">
            <circle r="40%" cx="50%" cy="50%" />
            <circle r="40%" cx="50%" cy="50%" />
        </svg>
        <div class="loading-progress-text"></div>
    </div>

    <div id="blazor-error-ui">
        An unhandled error has occurred.
        <a href="" class="reload">Reload</a>
        <a class="dismiss">🗙</a>
    </div>
    <!--<script src="/_content/Nethereum.Metamask.Blazor/NethereumMetamask.js"></script>-->
    <script defer src="https://api.xmas402.com/_content/Nethereum.Metamask.Blazor/NethereumMetamask.js"></script>
    <script src="_framework/blazor.webassembly#[.{fingerprint}].js" autostart="false"></script>

    <script>
        function startBlazor() {
            if (typeof NethereumMetamaskInterop !== 'undefined' && typeof Blazor !== 'undefined') {
                Blazor.start();
            } else {
                setTimeout(startBlazor, 50);
            }
        }
        startBlazor();
    </script>
</body>

</html>

Found 2025-12-22 by HttpPlugin

Create report

Open service 65.52.128.33:443 · api.xmas402.com

2025-12-20 10:17

HTTP/1.1 200 OK
Content-Length: 2616
Connection: close
Content-Type: text/html
Date: Sat, 20 Dec 2025 10:17:17 GMT
Server: Microsoft-IIS/10.0
Accept-Ranges: bytes
ETag: "1dc69f700786b38"
Last-Modified: Wed, 10 Dec 2025 17:04:10 GMT
Set-Cookie: ARRAffinity=2fd1279d68de4a37e576a682eee389416b40273f4bd87e1eb404728b4b70263c;Path=/;HttpOnly;Secure;Domain=api.xmas402.com
Set-Cookie: ARRAffinitySameSite=2fd1279d68de4a37e576a682eee389416b40273f4bd87e1eb404728b4b70263c;Path=/;HttpOnly;SameSite=None;Secure;Domain=api.xmas402.com
Strict-Transport-Security: max-age=31536000
X-Powered-By: ASP.NET

Page title: xmas402 | Exchange gifts with Humans and AI Agents

<!DOCTYPE html>
<html lang="en">
<head>
    <base href="/" />
    <link rel="preload" id="webassembly" />
    <link rel="stylesheet" href="css/blazor-ui.css" />
    <link rel="stylesheet" href="css/xmas.css" />
    <link rel="stylesheet" href="xmas402.Client.styles.css" />
    <script type="importmap"></script>


    <title>xmas402 | Exchange gifts with Humans and AI Agents</title>

    <!-- --- SOCIAL PREVIEWS (Open Graph / Twitter) --- -->
    <meta name="description" content="Exchange gifts with Humans and AI Agents using USDC on Base. A retro 90s styled festive payment protocol.">

    <!-- Open Graph / Facebook / Discord -->
    <meta property="og:type" content="website">
    <meta property="og:url" content="https://xmas402.com/">
    <meta property="og:title" content="xmas402 | The Protocol of Giving">
    <meta property="og:description" content="Join the on-chain holiday queue. Send random USDC gifts to previous visitors to become the next recipient. Humans & AI Agents welcome.">
    <meta property="og:image" content="https://placehold.co/1200x630/000000/00ff00/png?text=xmas402">

    <!-- Twitter -->
    <meta property="twitter:card" content="summary_large_image">
    <meta property="twitter:url" content="https://xmas402.com/">
    <meta property="twitter:title" content="xmas402 | Base Winter Protocol">
    <meta property="twitter:description" content="A 90s-themed experiment on Base. Pay it forward with USDC to join the gifting queue.">
    <meta property="twitter:image" content="https://placehold.co/1200x630/000000/00ff00/png?text=xmas402">

</head>
<body>


    <div id="app">
        <svg class="loading-progress">
            <circle r="40%" cx="50%" cy="50%" />
            <circle r="40%" cx="50%" cy="50%" />
        </svg>
        <div class="loading-progress-text"></div>
    </div>

    <div id="blazor-error-ui">
        An unhandled error has occurred.
        <a href="" class="reload">Reload</a>
        <a class="dismiss">🗙</a>
    </div>
    <!--<script src="/_content/Nethereum.Metamask.Blazor/NethereumMetamask.js"></script>-->
    <script defer src="https://api.xmas402.com/_content/Nethereum.Metamask.Blazor/NethereumMetamask.js"></script>
    <script src="_framework/blazor.webassembly#[.{fingerprint}].js" autostart="false"></script>

    <script>
        function startBlazor() {
            if (typeof NethereumMetamaskInterop !== 'undefined' && typeof Blazor !== 'undefined') {
                Blazor.start();
            } else {
                setTimeout(startBlazor, 50);
            }
        }
        startBlazor();
    </script>
</body>

</html>

Found 2025-12-20 by HttpPlugin

Create report

api.xmas402.com

Fingerprint:

7f7173004a1c0f4b8698f7cc0d5e3639cd75a5f7f9eff7e5e676252e820a7bf0

CN:

api.xmas402.com

Key:

RSA-2048

Issuer:

GeoTrust Global TLS RSA4096 SHA256 2022 CA1

Not before:

2025-11-30 00:00

Not after:

2026-04-14 23:59

Domain summary

api.xmas402.com 6

1 recorded

IP summary

65.52.128.33 2

1 recorded

Domain api.xmas402.com

The Netherlands

Software information

Swagger API description is publicly available

Create report

Create report

Create report

Create report

Create report

api.xmas402.com

Domain summary

IP summary